$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft File: u99YzWESke9boarLayzE7VCwEVc.mft (raw, json) Hash identifier: 3wlXehwlrMlbjSKoSknz0rPyv+W0gtiojLvVZcBxEds= Subject key identifier: AA:20:C2:2A:32:D0:43:C8:46:36:01:52:69:DA:1D:0E:32:93:D6:33 Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 Certificate issuer: /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Certificate serial: 03C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft Manifest number: 03B0 Signing time: Sat 23 Nov 2024 00:19:07 +0000 Manifest this update: Sat 23 Nov 2024 00:19:06 +0000 Manifest next update: Sat 30 Nov 2024 00:19:06 +0000 Files and hashes: 1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: e5o1a3hY2xFq7g1Y4ZD7V8YBV1HKDzGx3Oj81/eyNF4=) 2: C32984BE6B1011EEACECDE38C4F9AE02.roa (hash: QV8yDdB/aBnujvUw9k5YEZKIEFHi0AQt3Gc1cTTRp5Y=) 3: 08241A166B1111EE99759439C4F9AE02.roa (hash: 4ppChZ9jVbCYg6pjEna3vYQITcTqnyvQumfQReb/zW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 964 (0x3c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157 Validity Not Before: Nov 23 00:19:06 2024 GMT Not After : Nov 30 00:19:06 2024 GMT Subject: CN=67411f7a-8018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:17:f7:18:de:a1:ea:e9:30:54:ad:e2:64: d6:37:26:2e:66:47:19:03:08:1b:56:35:7d:33:da: bf:e6:20:29:13:3d:cf:32:78:70:a3:58:0e:a2:c3: 59:41:1d:2b:47:64:40:97:ad:10:8d:05:8d:09:cc: 9c:fe:84:92:2f:46:e0:71:bc:a8:4b:da:b2:d9:5d: 61:8f:58:97:c5:35:bf:e3:91:da:a0:fd:13:9f:f1: 0d:6b:4f:71:79:38:78:94:12:1d:7e:09:b6:92:c5: 13:86:db:7e:aa:46:0b:68:48:2e:c6:a5:c3:a8:b5: 65:7b:4c:54:95:40:c8:ba:0a:e1:a7:d7:00:f0:89: 89:9e:c8:39:de:53:27:58:89:76:c1:74:2b:85:e9: 01:bf:02:08:52:05:21:ec:76:27:60:1e:21:11:35: f8:69:2e:50:20:7c:87:d3:ae:8c:6c:90:67:99:7e: 94:c7:b1:45:f7:4e:cf:eb:5e:2d:ab:87:61:35:a0: 99:89:ea:0b:4c:43:8a:e9:ca:9d:8d:c3:d4:d5:84: ba:d9:d0:a6:df:28:4a:e2:0d:b3:2f:32:ef:2e:99: 70:73:df:f9:e6:6b:bc:b9:f8:a3:c7:0b:df:b7:bd: cd:7f:90:57:03:62:25:50:04:c7:9c:49:a5:d3:e0: e1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:20:C2:2A:32:D0:43:C8:46:36:01:52:69:DA:1D:0E:32:93:D6:33 X509v3 Authority Key Identifier: keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cb:de:9f:4f:1e:ab:19:87:3c:a3:9e:cf:d4:2c:e6:50:c4: 6f:b3:2f:16:b6:ca:ef:e9:3e:25:46:4f:88:df:60:0e:53:21: 53:44:9b:81:69:df:d1:c1:56:85:9d:96:80:ad:f8:25:dd:b8: 7c:22:94:89:f2:0e:35:6c:f7:76:2e:e4:2c:45:99:16:14:6e: 18:18:e2:c2:4d:e3:b3:d5:44:24:ad:24:65:3a:65:6e:5d:74: 59:f3:98:0d:63:0f:09:7a:ab:a7:82:f4:9c:91:77:3a:31:d9: 81:cc:4a:63:06:a5:02:e3:99:6e:19:7d:af:3c:45:74:2f:48: 87:78:37:0e:15:39:a9:bf:03:50:87:66:b0:4d:6f:32:b4:d0: b2:a6:af:f7:e2:54:cd:b1:f5:99:d5:f5:77:39:43:6b:98:aa: e3:66:7c:80:68:15:11:9a:9b:de:ef:d0:47:5e:22:ac:0a:92: fa:49:dd:3a:77:c5:5e:3e:4b:6f:f2:6b:a6:e3:51:84:1f:f8: 13:a3:d5:14:0d:59:b3:98:7e:b4:44:bc:b8:35:d7:ac:ed:5c: ad:20:fc:69:4b:79:c0:63:80:9d:90:1a:2d:88:91:1e:f2:8a: 7f:43:04:cd:2e:bf:e6:e4:36:d2:b4:7c:fa:3a:86:3f:f7:bf: c9:6e:e4:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE NTBCMDExNTcwHhcNMjQxMTIzMDAxOTA2WhcNMjQxMTMwMDAxOTA2WjAYMRYwFAYD VQQDEw02NzQxMWY3YS04MDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XQX9xjeoerpMFSt4mTWNyYuZkcZAwgbVjV9M9q/5iApEz3PMnhwo1gOosNZ QR0rR2RAl60QjQWNCcyc/oSSL0bgcbyoS9qy2V1hj1iXxTW/45HaoP0Tn/ENa09x eTh4lBIdfgm2ksUThtt+qkYLaEguxqXDqLVle0xUlUDIugrhp9cA8ImJnsg53lMn WIl2wXQrhekBvwIIUgUh7HYnYB4hETX4aS5QIHyH066MbJBnmX6Ux7FF907P614t q4dhNaCZieoLTEOK6cqdjcPU1YS62dCm3yhK4g2zLzLvLplwc9/55mu8ufijxwvf t73Nf5BXA2IlUATHnEml0+DhVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKogwioy 0EPIRjYBUmnaHQ4yk9YzMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0 NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/y96fTx6rGYc8o57P1CzmUMRvsy8Wtsrv6T4lRk+I32AOUyFTRJuB ad/RwVaFnZaArfgl3bh8IpSJ8g41bPd2LuQsRZkWFG4YGOLCTeOz1UQkrSRlOmVu XXRZ85gNYw8JequngvSckXc6MdmBzEpjBqUC45luGX2vPEV0L0iHeDcOFTmpvwNQ h2awTW8ytNCypq/34lTNsfWZ1fV3OUNrmKrjZnyAaBURmpve79BHXiKsCpL6Sd06 d8VePktv8mum41GEH/gTo9UUDVmzmH60RLy4Ndes7VytIPxpS3nAY4CdkBotiJEe 8op/QwTNLr/m5DbStHz6OoY/97/JbuTs -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:46 2024 by rpki-client on console-fra.rpki-client.org